CVE-2010-1938

Published May 28, 2010 CVSS 2.0 · 9.3 Critical EPSS 22.1% KEV · Not listed
Description
Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2281-1 opie security update
Ubuntu USN Ubuntu USN USN-955-1 OPIE vulnerability
Ubuntu USN Ubuntu USN USN-955-2 libpam-opie vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 2:17 AM
Reserved
May 13, 2010, 12:00 AM
Status
Modified
Published
May 28, 2010, 6:30 PM
Modified
Jun 16, 2026, 11:19 PM